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REMARKS 

Reconsideration of this application in view of the above amendments and following 
remarks is requested. After entry of this amendment, claims 1-79 are pending in the 
application. Claims 2, 11-14 3 26, 27, 38, 39, 41, 43, 50, 51, 53, 54, 63, 64, and 75 are 
amended, and claims 76-79 are added. 

In the Office Action dated June 25, 2004, the examiner rejects claims 1-3, 11, 13-16, 
24, 26-28, 36, 38-41, 49, 51-53, 61, 63-66 and 74 under 35 U.S.C. §102 as being anticipated 
by Lipkin, et al (US 6,138,235). The examiner rejects all of the remaining claims under 35 
U.S.C. §103(a) as being unpatentable over one or more of Lipkin, et al (US 6,138,235), Butt, 
et al (US 6,754,829), and Davis, et al (US 6,088,450). 

Claim Rejections - 35 USC §102 

Regarding the rejection of claims 3, 16, 28, 41, 53 and 66, the examiner states that 
Lipkin teaches "determining that the requesting module owns the certificate," and cites 
Lipkin at col. 7, lines 22-33. Lipkin does not teach determining that the requesting module 
owns the certificate. 

Lipkin purportedly teaches a system check for the validity of a request for access to 
service. The validity check involves an examination of all certificates in the chain and the 
client code to ensure that the certificates and the client code are signed with the proper private 
keys, through use of corresponding public keys (Lipkin, col. 7, lines 22-39). This is not 
determining that the requesting module owns the certificate. Indeed, in Lipkin, each client 
company optionally generates its own public/private key pairs and matching certificates for 
each client code module assuming the role represented by key zero (Lipkin, col. 7, lines 15- 
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18), where key zero is associated with a role defining a set of services that may be performed 
in the role (Lipkin, col. 7, lines 4-6). 

To be sure, Lipkin purportedly provides a method and apparatus for providing a first 
computer program module with the ability to access a service from a second computer 
program module after determining whether the first computer program module has been 
digitally signed by an authority having power to confer access for the service. Alternatively, 
Lipkin purportedly teaches verifying that the first computer program module includes a chain 
of certificates establishing a chain of authorization for the service by verifying that the first 
certificate in the chain is signed by an entity that is originally authorized to confer access for 
the service, and verifying that subsequent certificates in the chain are signed by entities that 
have been delegated authorization to confer access for the service. (Lipkin, col. 1, lines 48- 
65). 

Accordingly, Lipkin does not disclose, teach or suggest, determining that the 
requesting module owns the certificate, as recited in claims 3 (and claims 4-10 dependent 
thereon), 11, 12, 14 (and claims 15 and 16 dependent thereon), 17 (and claims 18-23 
dependent thereon), 28 (and claims 29-35 dependent thereon), 39 (and claims 40 and 41 
dependent thereon), 42 (and claims 43-48 dependent thereon), 53 (and claims 54-60 
dependent thereon), 64 (and claims 65 and 66 dependent thereon), 67 (and claims 68-73 
dependent thereon), and 77. 

Regarding amended claims 2 and 27, Lipkin fails to teach that determining whether 
the certificate authorizes processing includes verifying whether the certificate has expired. 

Regarding amended claim 12, Lipkin further fails to teach a certificate including an 
owner field that identifies the owner of the certificate. 
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Regarding amended independent claim 13, Lipkin fails to teach receiving specified 
parameters from the requesting module including an authorization interface of the requesting 
module and an authorization interface of an original requestor of the requesting module, if 
applicable. Lipkin 5 s teachings are limited to interaction between only a first and a second 
computer program module, purportedly providing the first program module with the ability to 
access a service from the second computer program module. Lipkin fails to teach interaction 
between two or more modules requesting service from an adjunct program module. 

Similarly, regarding amended independent claims 38, 51, and 63, Lipkin fails to teach 
interaction between three or more computer program modules involving a request to access a 
service from one of the three or more computer program modules. More specifically, in 
claim 38, Lipkin fails to teach receiving an authorization interface from the requesting 
module (the direct requestor) and any requestor of the requesting module (indirect 
requestor(s)). Regarding claim 51, Lipkin fails to teach requesting authorization data from 
the requesting module (as a direct requestor) and any requestors of the requesting module (as 
indirect requestors), or receiving at least one certificate from the direct and indirect 
requestors. Regarding claim 63, Lipkin fails to teach receiving a request from a requesting 
module, wherein the requesting module received the request from at least one prior requestor 
module, the request originating from an originating prior requestor module, or requesting 
authorization from the requesting module regarding the originating prior requestor module. 

Regarding amended independent claim 26, Lipkin fails to teach receiving a certificate 
that includes an ownership field that identifies the owner of the certificate and an expiration 
field that identifies an expiration of the certificate. Lipkin teaches only that, for purposes of 
its disclosure, a certificate is a signed electronic document that certifies that something is 
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true, and typically indicates that someone has ownership of a public key. Further, that in 
invention of Lipkin, a certificate can indicate that an entity can have access to services 
represented by a key, and may include the identity of a signing authority as well as a digital 
signature produced with a private key (that can be validated with a corresponding public 
key). (Lipkin, col. 5, lines 7-15). 

Applicant reserves amendment or traversing argument directed to the 35 USC § 102 
rejection of independent claim 1 pending further disposition of claim 1 in view of the 
amendments to the claims dependent thereon. 

Claim Rejections - 35 USC § 103 

As specifically discussed above, Lipkin fails to disclose or teach at least the above- 
referenced features of the present invention as claimed. Butt and Davis also fail to teach the 
above-reference features, even if combined with Lipkin. 

Butt purportedly teaches an operating system for an operator of a console to manage a 
device. In Butt, an operating system independent session certificate is obtained by the 
operator of the console executing a first operating system, from a trusted core of the device 
executing a second operating system, to authenticate identity and group membership of the 
operator. The operating system independent session certificate is provided by the operator to 
the device executing a third operating system, along with a management request. And, the 
device determines whether the authenticated operator has necessary access privilege to 
perform the management request based at least in part on the authenticated group 
membership of the operator set forth in the operating system independent session certificate. 

Davis purportedly teaches a wireless authentication system to control an operating 
state of a computer based on the proximity of an authorized user to the first node. The 
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wireless authentication system comprises a security device implemented within the computer 
and a user authentication token in possession of the authorized user. The security device 
generates a challenge and transmits it to the token. In response, the token generates and 
transmits a response to the security device if the token is within a predetermined distance 
from the security device. Thereafter, the authorized user can access the computer because it 
is in an operational state. 

Accordingly, Lipkin, whether alone or in combination with one or more of Butt and 
Davis, fail to teach a method and system for authorizing processing of an adjunct program 
module by one or more requesting program modules, as claimed by applicants. Applicants 
respectfully submit that at least independent claims 13, 26, 38, 51 and 63 patentably define 
over Lipkin, Butt and Davis. Reconsideration of the 35 USC § 103 rejections is therefore 
respectfully requested. 

Claims Added by this Response and Amendment 

Dependent claims 76-79 are added by this response and amendment to more 
completely cover certain aspects of applicant's invention. In addition to being patentable for 
at least the reasons described above for respective independent claim 63, claims 76-79 each 
recite additional elements patentable over the prior art. Claims 76-79 find support in portions 
of the specification including, but not limited to, the following: 

Claims 76 and 77: paragraph 61; 

Claim 78: paragraph 62; and 

Claim 79: paragraph 63. 
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In light of the above amendments and remarks, applicants respectfully request 
reconsideration of the present application. The examiner is invited to call the undersigned 
attorney at any time, and especially in the event that a telephone interview might advance 
prosecution of this application. 



Woodcock Washburn LLP 
One Liberty Place - 46th Floor 
Philadelphia PA 19103 
Telephone: (215) 568-3100 
Facsimile: (215) 568-3439 



CONCLUSION 



Respectfully submitted, 





Bruce D. George ^ 
Registration No. 43,63 1 
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